What is the true purpose of a User Access Review? Client wants to just review roles that have an accounting impact, but shouldn’t they review all roles that could potentially affect the business\application? For SOX, is it ok that they only review roles that management determines is only affecting accounting?

like
Posting as :
works at
You are currently posting as works at

PCAOB expectation is the review covers both roles and permissions

like

Main purpose is that it is the compensating control for when your preventative controls (ie provisioning and terms) fail. Management should do a risk assessment and document why they are comfortable reviewing the certain roles vs the others. From an IT perspective though, it is probably important that any privileged IT access is also reviewed somewhere.

Yes, especially if they don’t have robust front end controls.

Outdated control, derived from accounting review controls. You think IT admins really review the appropriateness of 100+ users from looking at a list? Compliance for IT folks is their lowest priority. Automated controls much better, in AWS for example you can utilize access analyzer for over permissive permissions

UARs, especially big ones that are infrequent, are almost worthless.

In this instance, you should be getting coverage over IT users as well. How are you doing that?

Related Posts

I have a small firm and am contemplating acquiring a practice from a retiring attorney. The plan would be to bring him into the firm for a year or two first to transition the clients. Is there a standard payment structure once he retires? Such as percent collected each month from his client base? Agreed upon salary for a set amount of time? Any suggestions or insight would be appreciated.

like

Anyone working for an Australian client and follows Australia timings ??

like

We need to grow quickly to keep up with client work. We hired 4 attorneys since Jan 1. 3 newbies and 1 senior associate with nearly as much experience as the partners. Have 9 total now, but 3 are Of counsel. Hiring newbies is excruciating and a time suck. Do any of you have advice for hiring laterals? Need a staff sergeant to take associate work product of my plate that I can trust… hiring is so stressful

like
like

McKinsey & Company Can someone recommend the top consulting firms to look at for HCLS opportunities? Preferably firms with a dedicated BU in HCLS focused on advising as well as project based work. I am currently in discussions with Huron. I have looked at Oliver Wyman (appears to be heavy on payor and Rev Cycle), Deloitte McKinsey & Company and Capgemini I’ve reached out to McKinsey but didn’t receive a reply. Any direction/advice and referrals would be greatly appreciated!

like

Hi All,

I'm Looking for Job change, For TL/people management roles, Please help me out

I carry 6+ years of experience with the below Skills and Expertise - 6.5 total exp Migrated 8 process so far as pilot Batch.

Core Skills - Middle office, Collateral management, settlements, Margining, Risk management, Trade Capture, Client Services, Security Lending, Multiple Migrations & Team Management for 1 and half years, Validation confirmations, Data Reference,Static and Project Management.

Looking for a full-time Salesforce Technical Lead! This is a hands-on, remote developer role leading client projects. Reach out to me if you know anyone who might be interested!

like

I got shortlisted for an organisation, then comes the package talk with HR. The mere 5yrs experience HR is saying that cannot provide me more than 30% & very strict in following the same in providing hikes.Most of the Indian companies are still no changing to provide normalisation. Because, because , because of this HR's are only good in negotiating with recruits and don't have the guts to take it to the organization and negotiate to convince Org. On top of it their Email says Employees 1st n client 2nd

like

Are project managers directly hired for a project? Or they have also to find projects and give client interviews to get one??

like

Hello Fishes,

Looking for referral
Goldman Sachs Microsoft Northern Trust Wells Fargo

1. I have 11 years of experience in Operations & Project Management.
2. Have implemented innovative and digital transformation projects such as ERP and IT Simulator.
3. Carried out process improvement and Cost-Benefit Analysis.
4. Engineer with MBA degree.
5. Certifications are :

Certified Project Manager (PMP)
Certified Scrum Master (CSM)
Lean Six Sigma Green Belt (LSSGB)

Looking for managerial roles.

like

Even to this day, I feel like I have crippling anxiety and imposter syndrome when speaking. It’s easier in project read outs and dedicated client meetings, but much worse when I’m going in cold or without a set agenda. Has anyone worked with / used a coach, tools, etc. to help with this? Recommendations?

like
like

Hi fishes,
Please suggest best among below offers
Exp 6 yrs
Technical Microsoft Dynamics CRM developer
Offers: need to join 26 th only two days more to go timely response helps me
BIRLA SOFT 22 LPA - hp client
Wipro 21 LPA - HSBC client
Robert Bosch - 21 lpa
Cognizant - 22 LPA
HSO 21 .5 LPA

Thanks

like

Hi all, I am interested in the Salesforce Project Manager position job ID JR121317. Is anyone able to connect to talk more about position and interview process?

like

Anyone worked at an FFRDC or UARC supporting gov client? How was your experience? Any comparisons pos/neg to typical fed consulting or contracting?

like

Anyone into the s/4 hana project yet ? Hearing couple of big names getting into as of now.

like

What is the OTE for a Client Solutions Manager @ Meta or an AM at Google?

like
like

I hve around 5.5 years of exp, started with MNC was in backup and storage for 3 and half years , then studied DevOps on my own and managed to crack some interviews,lied about work experience but joined Infosys, from last 2 years did little bit work on devops Jenkins and basic projects, recently moved to docker based project learning is good, but LPA is just 8.8, feeling it's too less, for switch I am not that confident can someone give tips or guide me for learning.

like

More Posts

Hi guys, my joining date in SAP is on May first week. When can I expect mails regarding onboarding process. Can someone recently joined brief me the process?

like

Referrals seem to have the upper hand so I figured advertising myself is worth a shot. Recent M.A grad currently based in atl, but looking to move to nyc. If anyone needs a jr. strategist or ae and would like to see my resume/portfolio, send me a note at a104352@aup.edu ! I can pinky promise to be a very enthusiastic and hard-working team member :)

**since this is still the only bowl I can post to, please feel free to spread the word if you want**

like

Hello Fishes,

I had given interview
Mindtree and cleared both technical rounds. On Tuesday 29 March 2022, I got a call from HR for the final discussion. After that I have not received any response.

I have been calling the HR and her manager, both are not responding to mail or calls.

Is there a way to get some information if my candidature is still in progress or is this delay natural? I have another offer from another company, but am more interested in joining Mindtree.

like

I have an offer letter with Tcs and my joining date is Sep12. Still now I have not received any joining email.

Onboarding manager and HR are not responding.

like

Is San Antonio a good place to raise a family? Why or why not? We're thinking of making the move to be near family and have heard mixed reviews although generally positive.

Hi Fishes,

How to apply for
Walmart India Tech jobs?

I am not able to login to careers portal. When I try to upload my profile for any opening it says profile already available.

Someone referred my profile some time back. Post this I am not able to apply for any opening or track the applied positions.

Can someone please help? Walmart

like

Is there anyone at Twitter that can seriously help my obtain a handle that has been inactive for over 6 years? I realize there is no official process for inactive accounts, but I really could use this one for my social media presence. Help?!

like

Anyone open to sharing my resume for the SOAR Program @ LinkedIn? Just graduated summa cum laude from UC Davis—really excited about this app. Happy to chat more if you have the time! Much appreciation!

like

Hi fishes, Male A here from Pune office.
I am planning into a flat from July 1st week. Pls let me know if there is any availability in your flats or if you want to search together

9/22 Thread (General):

like

May be a very naive question - Do Novartis provide comapny cell phone based on the designation?

😐

H1 promise on resignation , how is traveling to us amid these covid times ..

Are there any stampings and travells going on.


Can I reject offer from product company and stick to tcs for the dame

funny

I'm working as a servicenow qa ...I would like to learn servicenow development...please someone guide me on this..And any helpful resources to learn development.

like

Hello Everyone,

How's the work culture in Accenture Canada in Technology domain? What's the salary range for a Senior developer and how's the work life balance? I hear from many people that during on-site, the work pressure is pathetic. Is that true? Please share your experience!

Thanks!!

like

I would really like to take someone under my wing and teach them the intricacies of presentation design. Paid opportunity.

Anyone out there?

likeupliftinghelpful

Looking for tips on how to manage attorney employees. How to ensure that they take me serious and not see me as an admin. I am an operations manager at a midsize firm. Although I’m in my thirties, I look very young and I get the sense that many tend to view me like their teenage daughter. I’ve found that having an authoritarian management style helps but it does not feel genuine.

like

I’m a recent grad interested in becoming a programmatic AM. Anyone out there who would be willing to do a quick phone informational interview with me? There are some Q’s that articles don’t answer

Guys,

What was the increment % genrally before covid for normal staff progression?

like
like

Sup guys! Asked before, but curious to hear anything new: What are some side hustles you’ve been doing to get some extra income? Curious to hear some ideas for my own brainstorming. I used to flip couches off FB marketplace as a side hustle

like

Additional Posts in Risk Assurance

Been in a regional public accounting firm - risk advisory/internal audit for 4ish years now. I like the work but the pay is terrible. I see seniors making a whole lot more than me. Feel like I'm overworked and massively underpaid. Thinking of switching jobs, but still debating on whether to stay in public accounting or move to industry. Any advice/thoughts?

like

I am a second year associate and has been involved in IT audit, having done some technical review for unix and windows servers, I’m gaining interest in cyber security, any advice how to manoeuvre?

like

If I had a dollar for every time the core team referred to an automated control as “Inherent Functionality”

likefunny

Just transferred from IT Audit to Strategy and Transactions. Been a goal of mine for a while so I’m happy to see it play out. Not posting just to say I did it, but because I’ve been following this bowl for a while and see people get negative about being pigeon holed. There were tons of transferable skills that I was able to highlight that got a role that’s completely different, so I just don’t want anyone feeling discouraged if they’re hitting walls.

like

What is a good pay range for a senior IT auditor in a T2 city, 2 yoe.

like

Are there any onsite or even online trainings that are relevant for Risk Assurance, Data analytics more towards Operational audits, Continuous Control Monitoring etc?

like

From industry to big 4?
Would you take a pay cut and go to pwc as a 1st year senior in risk assurance?
I make 95-98K and work great hours at a great company. Would be getting a pay cut if I join pwc

Has anyone made the switch from Risk Assurance to Financial Planner or knows anyone who has? Is this possible without going back to school?

like

Getting out of tech risk for a 70% increase in TC. For all the college hires that got mislead by how risk consulting was sold to them there’s hope out there. Keep pushing 🥺

likeupliftingfunny

Is it possible to do RA in the tech space? I know someone mentioned working at FAANG. How hard is it to make this move?

like

I joined EY for their Risk Consulting practice because I wanted to break into consulting. I hope to get a top MBA sponsored as well. I hear from my colleagues that Risk isn’t considered the same as consulting and it’s not as valued for a top MBA...is this true?

likefunny

What’s the difference between Risk Transformation and Performance Improvement - IT advisory?

like

For a GRC position, can someone explain what comprises of a written exercise? Would appreciate any feedback.

like

DM me if you are interested in advisory roles at Grant Thornton. I am happy to refer and we need the help!

likefunny

I have about 8 years of accounting experience and have been at Morgan Stanley for the past 5 years. I currently do AML Enhanced Due Diligence work on their GFC Advisory team. I love the what I do, I just want to get some experience at another company.
I also care deeply about D&I and am leader on the Black Employee Network Steering Committee at Morgan. Is anybody hiring either AML or Internal Audit Profesionals?

like

Thoughts on EY risk advisory?

like

@EY 🐠 In GPS IT AUDIT, how is the culture / working hours / work environment like?? How often /long did you have to travel??

like

What are the possible future opportunities if I want to make a career jump from risk assurance?

like

Anyone here made the move from technology risk (it audit) to technology in m&a in the big 4?

likefunny

What kind of hours does PWC risk assurance work throughout the year? Fall busy season? Also, do you travel a lot?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Send download link to your phone

OR

Scan your QR code to download
Fishbowl app on your mobile

By continuing you agree to Terms of Use and Privacy Policy.

Messaging rates may apply

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal